Security researchers can assess the security settings of a public repository, suggest a security policy and report a vulnerability.

Discuss, fix, and disclose security vulnerabilities in your public repositories using repository security advisories.

You can use repository security advisories to privately discuss, fix, and publish information about security vulnerabilities in your public repository.

You can use repository security advisories to privately discuss, fix, and publish information about security vulnerabilities in your repository.

Learn how to work with security advisories on GitHub, whether you want to contribute to an existing global advisory, or create a security advisory for a ...

Owners and administrators of public repositories can allow security researchers to report vulnerabilities securely in the repository by enabling private ...